feat(rooms): 멤버 초대 공유와 여행 정보 수정 허용

src/app/(main)/member-settings/_components/AddMemberPanel.tsx

@@ -7,7 +7,7 @@
 import { toast } from "sonner";
 
 import { useRegenerateInviteCode } from "@/hooks/useRooms";
-import { isHostRole } from "@/lib/rooms";
+import { isHostRole, isRoomMemberRole } from "@/lib/rooms";
 import {
   bucketMemberCount,
   toAnalyticsRoomRole,
@@ -42,12 +42,12 @@
     return <LoadingIndicator label={isRoomDetailLoading ? "방 정보 불러오는 중" : "초대 링크 발급 중"} />;
   }
   let message = "발급에 실패했어요. 아래에서 재발급을 눌러 주세요.";
-  if (!canIssue) message = "방장만 볼 수 있어요.";
+  if (!canIssue) message = "초대 링크를 사용할 수 없어요. 방 정보를 다시 확인해 주세요.";
   else if (isRoomDetailError || inviteCode === undefined) message = "방 정보를 불러오지 못했어요. 아래에서 재발급을 눌러 주세요.";
   return <span className="truncate text-body-s-regular mobile:text-body-xs-regular text-text-subtle">{message}</span>;
 }
 
 export function AddMemberPanel({
   roomId,
   inviteCode,
   memberCount,
@@ -59,7 +59,8 @@
 }: Readonly<Props>) {
   const roomIdTrim = roomId.trim();
   // 초대 코드 발급·재발급 API는 방장 전용 — 참여자는 서버가 내려준 코드가 있을 때만 링크를 보여준다
-  const canIssue = isHost ?? isHostRole(role);
+  const canShareInvite = isRoomMemberRole(role) && !isRoomDetailError;
+  const canIssue = canShareInvite && (isHost ?? isHostRole(role));
   const detailInviteCode = normalizeInviteCode(inviteCode);
   const [copied, setCopied] = useState(false);
   const copyTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
@@ -110,7 +111,7 @@
 
   const displayedCode =
     issuedCode === undefined ? detailInviteCode || null : issuedCode;
-  const inviteUrl = displayedCode
+  const inviteUrl = canShareInvite && displayedCode
     ? `${typeof window !== "undefined" ? window.location.origin : ""}/join/${displayedCode}`
     : null;
 
@@ -163,7 +164,7 @@
   }
 
   function handleRegenerate() {
-    if (!roomIdTrim.length) return;
+    if (!roomIdTrim.length || !canIssue || isRegenerating) return;
     setCopied(false);
     regenerate(roomIdTrim, {
       onSuccess: ({ inviteCode: newCode }) => {

src/app/(main)/room-settings/_components/RoomTripSettingsSection.tsx

@@ -7,6 +7,7 @@ import { DeleteConfirmModal } from "@/app/home/_components/DeleteConfirmModal";
 import { RoomTripEditForm } from "@/components/rooms/RoomTripEditForm";
 import { MainPageHeader } from "@/components/layout/MainPageHeader";
 import { useCurrentRoomMembership } from "@/hooks/useCurrentRoomMembership";
+import { isRoomMemberRole } from "@/lib/rooms";
 import { useSessionStore } from "@/stores/session-store";
 
 /** 방장 전용 여행 삭제 — 제목 옆 작은 텍스트 버튼과 삭제 확인 */
@@ -51,9 +52,10 @@ export function RoomTripSettingsSection({
   onCancel?: () => void;
   onSaved?: () => void;
 }) {
-  const { roomId, roomSource, isHost, isLoading } = useCurrentRoomMembership();
-  const description = !isLoading && roomSource && roomId && !isHost
-    ? "방장만 여행 정보를 수정할 수 있어요."
+  const { roomId, roomSource, isLoading } = useCurrentRoomMembership();
+  const canEdit = isRoomMemberRole(roomSource?.role);
+  const description = !isLoading && roomSource && roomId && !canEdit
+    ? "여행 멤버만 여행 정보를 수정할 수 있어요."
     : undefined;
 
   return (
@@ -73,7 +75,7 @@ export function RoomTripSettingsSection({
           여행 정보를 불러오지 못했어요.
         </p>
       ) : (
-        <RoomTripEditForm room={roomSource} readOnly={!isHost} onCancel={onCancel} onSaved={onSaved} />
+        <RoomTripEditForm room={roomSource} readOnly={!canEdit} onCancel={onCancel} onSaved={onSaved} />
       )}
     </div>
   );

src/app/home/_components/InviteRoomModal.tsx

@@ -6,7 +6,7 @@ import { AddMemberPanel } from "@/app/(main)/member-settings/_components/AddMemb
 import { SettingsDialog } from "@/components/settings/SettingsDialog";
 import { useRoomDetail } from "@/hooks/useRoomDetail";
 import type { RoomListItem } from "@/lib/api/rooms";
-import { isHostRole } from "@/lib/rooms";
+import { isRoomMemberRole } from "@/lib/rooms";
 
 export function InviteRoomModal({ room, onClose }: {
   room: RoomListItem;
@@ -24,8 +24,8 @@ export function InviteRoomModal({ room, onClose }: {
           <p className="text-body-m-regular text-text-subtle">방 정보를 불러오지 못했어요.</p>
           <button type="button" onClick={() => void refetch()} className="rounded-[12px] bg-primary px-5 py-3 text-label-l-emphasis text-text-inverse">다시 시도</button>
         </div>
-      ) : !isHostRole(data.role) ? (
-        <p className="py-8 text-center text-body-m-regular text-text-subtle">방장만 멤버를 초대할 수 있어요.</p>
+      ) : !isRoomMemberRole(data.role) ? (
+        <p className="py-8 text-center text-body-m-regular text-text-subtle">여행 멤버만 초대 링크를 공유할 수 있어요.</p>
       ) : (
         <AddMemberPanel
           key={room.id}

src/app/home/_components/RoomCardMenu.test.tsx

@@ -3,6 +3,7 @@ import { act } from "react";
 import { createRoot, type Root } from "react-dom/client";
 import { afterEach, beforeEach, expect, it, vi } from "vitest";
 import type { RoomDetail, RoomListItem } from "@/lib/api/rooms";
+import { AddMemberPanel } from "@/app/(main)/member-settings/_components/AddMemberPanel";
 import { RoomCardMenu } from "./RoomCardMenu";
 
 const state = vi.hoisted(() => ({
@@ -92,7 +93,8 @@ it.each(["loading", "error", "member"])("does not issue links while detail is %s
   if (mode === "member") state.detail!.role = "MEMBER";
   await openInvite();
   expect(state.regenerate).not.toHaveBeenCalled();
-  expect(button("복사")).toBeUndefined();
+  if (mode === "member") expect(button("복사").disabled).toBe(true);
+  else expect(button("복사")).toBeUndefined();
   if (mode === "error") {
     await click("다시 시도");
     expect(state.refetch).toHaveBeenCalledOnce();
@@ -142,8 +144,35 @@ it("preserves host deletion and member leave permissions", async () => {
   expect(onDelete).toHaveBeenCalledWith(room);
   await render("MEMBER");
   await click("제주 여행 더보기");
-  expect(button("초대하기")).toBeUndefined();
+  expect(button("초대하기")).toBeDefined();
   expect(button("방 삭제하기")).toBeUndefined();
   await click("방 나가기");
   expect(onLeave).toHaveBeenCalledWith({ ...room, role: "MEMBER" });
 });
+
+it("lets a member copy and share the existing link without issuing or regenerating it", async () => {
+  state.detail!.role = "MEMBER";
+  await render("MEMBER");
+  await click("제주 여행 더보기"); await click("초대하기");
+  await click("복사");
+  expect(state.copy).toHaveBeenLastCalledWith(`${window.location.origin}/join/existing-code`);
+  await click("공유");
+  expect(state.copy).toHaveBeenCalledTimes(2);
+  expect(button("초대 링크 재발급")).toBeUndefined();
+  expect(state.regenerate).not.toHaveBeenCalled();
+});
+
+it("does not expose an invite from a nonmember detail response", async () => {
+  state.detail!.role = "PENDING" as RoomDetail["role"];
+  await openInvite();
+  expect(document.querySelector('input[aria-label="초대 링크"]')).toBeNull();
+  expect(state.regenerate).not.toHaveBeenCalled();
+});
+
+it.each(["PENDING", undefined])("hides even a cached invite link for invalid role %s", async (role) => {
+  await act(async () => root.render(<AddMemberPanel roomId="selected-room" role={role} inviteCode="cached-code" isRoomDetailLoading={false} isRoomDetailError={false} />));
+  expect(document.querySelector('input[aria-label="초대 링크"]')).toBeNull();
+  expect(button("복사").disabled).toBe(true);
+  expect(button("초대 링크 재발급")).toBeUndefined();
+  expect(state.regenerate).not.toHaveBeenCalled();
+});

src/app/home/_components/RoomCardMenu.tsx

@@ -7,7 +7,7 @@ import { InviteRoomModal } from "./InviteRoomModal";
 
 import { useOnClickOutside } from "@/hooks/useOnClickOutside";
 import { RoomListItem } from "@/lib/api/rooms";
-import { isHostRole } from "@/lib/rooms";
+import { isHostRole, isRoomMemberRole } from "@/lib/rooms";
 
 type Props = {
   room: RoomListItem;
@@ -56,8 +56,7 @@ export function RoomCardMenu({ room, onDelete, onLeave }: Props) {
 
       {open && (
         <div className="absolute right-[10px] top-[42px] z-30 w-40 overflow-hidden rounded-[12px] bg-white shadow-[0_2px_10px_rgba(0,0,0,0.1)]">
-          {isHost ? (
-            <>
+          {isRoomMemberRole(room.role) ? (
             <button
               type="button"
               onClick={() => {
@@ -70,6 +69,8 @@ export function RoomCardMenu({ room, onDelete, onLeave }: Props) {
               <Image src="/rooms/figma/invite.svg" alt="" width={20} height={20} className="size-5 shrink-0" />
               초대하기
             </button>
+          ) : null}
+          {isHost ? (
             <button
               type="button"
               onClick={(e) => {
@@ -82,7 +83,6 @@ export function RoomCardMenu({ room, onDelete, onLeave }: Props) {
               <Image src="/rooms/figma/trash.svg" alt="" width={20} height={20} className="size-5 shrink-0" />
               방 삭제하기
             </button>
-            </>
           ) : (
             <button
               type="button"

src/components/rooms/RoomTripEditDialog.test.tsx

@@ -4,7 +4,7 @@ import { createRoot, type Root } from "react-dom/client";
 import { afterEach, beforeEach, expect, it, vi } from "vitest";
 
 const state = vi.hoisted(() => ({
-  room: { id: "room", title: "가을 여행", destinations: ["서울"], startDate: "2026-10-10", endDate: "2026-10-12" },
+  room: { id: "room", title: "가을 여행", destinations: ["서울"], startDate: "2026-10-10", endDate: "2026-10-12", role: "HOST" },
   isHost: true, isLoading: false, missing: false, pending: false,
   update: vi.fn(),
 }));
@@ -54,7 +54,7 @@ async function open() {
   return trigger;
 }
 beforeEach(async () => {
-  state.isHost = true; state.isLoading = false; state.missing = false; state.pending = false;
+  state.room.role = "HOST"; state.isHost = true; state.isLoading = false; state.missing = false; state.pending = false;
   state.update.mockReset();
   host = document.createElement("div"); document.body.append(host); root = createRoot(host);
   await act(async () => root.render(<HeaderBar />));
@@ -98,11 +98,21 @@ it("retains the original date floor, date ordering and required destination vali
   expect(state.update).not.toHaveBeenCalled();
 });
 
-it("shows nonhost travel information without editable fields or a save action", async () => {
-  state.isHost = false; await open();
-  expect(dialog()!.textContent).toContain("방장만 여행 정보를 수정할 수 있어요.");
+it("lets members save travel information without granting deletion", async () => {
+  state.isHost = false; state.room.role = "MEMBER"; await open();
+  await change('input[type="text"]', "멤버 수정");
+  await click("적용하기", dialog()!);
+  expect(state.update).toHaveBeenCalledWith(expect.objectContaining({
+    roomId: "room", data: expect.objectContaining({ title: "멤버 수정" }),
+  }), expect.any(Object));
+  expect(dialog()!.textContent).not.toContain("여행 삭제");
+});
+
+it.each(["PENDING", "", "UNKNOWN"])("denies editing for unrecognized membership %s", async (role) => {
+  state.isHost = false; state.room.role = role; await open();
   expect(dialog()!.querySelector("input")).toBeNull();
   expect(dialog()!.textContent).not.toContain("적용하기");
+  expect(state.update).not.toHaveBeenCalled();
 });
 
 it.each(["loading", "missing"])("does not offer editing for %s room data", async (mode) => {

src/lib/rooms.ts

@@ -53,6 +53,11 @@ export function isHostRole(role: string | undefined | null): boolean {
   return role.toUpperCase() === "HOST";
 }
 
+/** 서버가 확인한 기존 방 참여자만 초대 링크 공유와 여행 정보 수정을 할 수 있다. */
+export function isRoomMemberRole(role: string | undefined | null): boolean {
+  return isHostRole(role) || role?.toUpperCase() === "MEMBER";
+}
+
 /** 방 목록·상세·멤버 role 중 하나라도 HOST 이면 true (캐시 타이밍 보강) */
 export function resolveViewerIsHost(sources: {
   listRole?: string | null;

src/lib/rooms/host-transfer-cache.test.ts

@@ -41,7 +41,7 @@ describe("applyHostTransferToCache", () => {
     const members = qc.getQueryData<RoomMemberListResponse>(roomMembersQueryKey(ROOM))!.members;
     expect(members.map((m) => [m.userId, m.role])).toEqual([[1, "MEMBER"], [2, "HOST"], [3, "MEMBER"]]);
     const detail = qc.getQueryData<RoomDetail>(roomDetailQueryKey(ROOM))!;
-    expect(detail).toMatchObject({ role: "MEMBER", inviteCode: null });
+    expect(detail).toMatchObject({ role: "MEMBER", inviteCode: "CODE" });
     const rooms = qc.getQueryData<RoomListResponse>(ROOMS_QUERY_KEY)!.rooms;
     expect(rooms.map((r) => r.role)).toEqual(["MEMBER", "HOST"]);
 

src/lib/rooms/host-transfer-cache.ts

@@ -34,10 +34,10 @@ export function applyHostTransferToCache(
         }),
       },
   );
-  // 서버는 참여자에게 inviteCode를 내려주지 않는다
+  // 위임 후에도 기존 멤버이므로 초대 링크는 유지한다.
   queryClient.setQueryData<RoomDetail>(
     roomDetailQueryKey(roomId),
-    (prev) => prev && { ...prev, role: "MEMBER", inviteCode: null },
+    (prev) => prev && { ...prev, role: "MEMBER" },
   );
   queryClient.setQueryData<RoomListResponse>(
     ROOMS_QUERY_KEY,